Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e3230f63-4700-49a1-8ecb-c2fbfa2d5851/ded1bec39eccdede416f53acc5df0811a17e2d5d.roa
File:                     ded1bec39eccdede416f53acc5df0811a17e2d5d.roa (raw, json)
Hash identifier:          NA3KgNJTrjlPGvHaEGTTZX06j46chOkQaQy7ntDO15A=
Subject key identifier:   35:FF:F1:C8:D0:B3:4E:89:47:18:E8:85:AB:7A:E1:C4:06:11:2E:EF
Certificate issuer:       /CN=274527f767243632b3f0f11b242c3ed620970435
Certificate serial:       1104BC
Authority key identifier: 58:75:28:27:E2:57:18:BB:FD:5E:05:F9:1F:48:E0:B6:BF:DE:43:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/274527f767243632b3f0f11b242c3ed620970435.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e3230f63-4700-49a1-8ecb-c2fbfa2d5851/ded1bec39eccdede416f53acc5df0811a17e2d5d.roa
Signing time:             Mon 03 Jul 2023 15:48:14 +0000
ROA not before:           Sun 02 Jul 2023 15:48:14 +0000
ROA not after:            Thu 03 Jul 2025 15:48:14 +0000
asID:                     269909
IP address blocks:        187.62.92.0/22 maxlen: 24
                          2803:6ce0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1115324 (0x1104bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274527f767243632b3f0f11b242c3ed620970435
        Validity
            Not Before: Jul  2 15:48:14 2023 GMT
            Not After : Jul  3 15:48:14 2025 GMT
        Subject: CN=ded1bec39eccdede416f53acc5df0811a17e2d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:13:9f:3c:00:80:75:ac:0f:ee:da:28:dc:47:
                    bd:bf:48:b0:35:79:bd:85:6a:a2:5a:b2:cb:7c:10:
                    33:d5:e1:fb:66:f8:72:c0:82:92:a2:3d:86:f4:e9:
                    69:80:1d:d0:7b:53:9d:71:db:23:3b:a3:ef:1e:6d:
                    42:8c:12:40:fb:8f:9d:9f:57:25:80:79:92:a9:c2:
                    9c:9b:67:57:66:50:3c:c1:2d:18:f3:59:da:53:0c:
                    7b:e1:2f:9e:3c:35:4b:40:68:d9:73:21:b2:0c:77:
                    8b:1a:34:a2:15:d1:a7:34:df:61:75:fe:c8:1d:49:
                    6c:96:81:35:49:77:cb:00:90:4c:95:44:03:3e:b5:
                    04:31:f8:09:aa:63:54:b4:78:f1:df:6d:5e:19:6e:
                    47:03:60:fd:7c:f9:2d:e5:3d:8c:7e:c7:8d:46:fc:
                    f3:e8:d1:5e:f8:ca:6e:c9:75:67:f6:0d:e5:3a:57:
                    e9:33:c8:bd:be:ee:20:52:36:89:81:19:1e:b7:e2:
                    ab:af:c6:f5:ee:e8:a5:8a:b2:bc:6c:76:9e:bc:06:
                    d0:39:f0:09:21:ef:7d:d2:57:09:28:2e:bb:b2:0a:
                    27:7d:8f:9c:3d:43:64:c9:68:6b:be:5e:80:2f:df:
                    67:2f:ed:7f:eb:44:6a:34:78:c6:80:bc:68:d6:de:
                    b4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:FF:F1:C8:D0:B3:4E:89:47:18:E8:85:AB:7A:E1:C4:06:11:2E:EF
            X509v3 Authority Key Identifier:
                keyid:58:75:28:27:E2:57:18:BB:FD:5E:05:F9:1F:48:E0:B6:BF:DE:43:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/274527f767243632b3f0f11b242c3ed620970435.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e3230f63-4700-49a1-8ecb-c2fbfa2d5851/ded1bec39eccdede416f53acc5df0811a17e2d5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e3230f63-4700-49a1-8ecb-c2fbfa2d5851/274527f767243632b3f0f11b242c3ed620970435.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.92.0/22
                IPv6:
                  2803:6ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:53:da:2d:3b:6c:34:d7:1a:fc:00:0b:e2:05:28:ef:c7:95:
         2c:2b:fb:db:02:85:89:f0:5a:8e:75:39:5e:0d:03:58:a7:76:
         5d:56:89:ed:9c:0c:b2:ce:37:6b:d1:9d:fa:a5:e8:2c:c6:ed:
         c8:b8:bb:f0:ff:b1:d3:5f:a0:30:5d:be:8f:ec:6f:15:f7:cf:
         48:27:3b:92:42:e2:57:8c:bd:b8:71:af:7d:92:f8:2a:71:ad:
         23:fe:e2:17:40:41:4f:d8:20:4d:98:f2:dc:4a:a0:36:c0:b9:
         fa:3e:5c:97:c6:ce:f2:de:0a:58:33:a8:29:df:21:8a:7b:be:
         8a:de:82:e6:31:aa:e3:4d:31:f9:63:32:45:fe:48:a8:0d:8c:
         f4:13:fc:e0:20:a2:23:48:7d:52:fe:0c:48:08:79:a7:07:28:
         19:3c:7a:42:c6:39:e9:ac:a0:ab:dc:e8:a0:91:74:2d:a1:dc:
         ee:98:a2:6d:b3:e9:d1:d0:5e:f4:a4:23:94:00:7e:ac:4a:6b:
         7d:a2:c2:ee:5d:83:73:09:54:66:f4:aa:c4:e3:75:23:ab:42:
         cc:78:8e:fd:37:c4:62:2d:5e:cf:d6:8e:7a:76:8e:ab:68:18:
         23:0b:31:28:33:62:79:16:66:36:d7:e8:79:c4:f4:f2:37:ca:
         e9:3c:22:35
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDEQS8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI3
NDUyN2Y3NjcyNDM2MzJiM2YwZjExYjI0MmMzZWQ2MjA5NzA0MzUwHhcNMjMwNzAy
MTU0ODE0WhcNMjUwNzAzMTU0ODE0WjAzMTEwLwYDVQQDEyhkZWQxYmVjMzllY2Nk
ZWRlNDE2ZjUzYWNjNWRmMDgxMWExN2UyZDVkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqxOfPACAdawP7too3Ee9v0iwNXm9hWqiWrLLfBAz1eH7Zvhy
wIKSoj2G9OlpgB3Qe1OdcdsjO6PvHm1CjBJA+4+dn1clgHmSqcKcm2dXZlA8wS0Y
81naUwx74S+ePDVLQGjZcyGyDHeLGjSiFdGnNN9hdf7IHUlsloE1SXfLAJBMlUQD
PrUEMfgJqmNUtHjx321eGW5HA2D9fPkt5T2MfseNRvzz6NFe+MpuyXVn9g3lOlfp
M8i9vu4gUjaJgRket+Krr8b17uilirK8bHaevAbQOfAJIe990lcJKC67sgonfY+c
PUNkyWhrvl6AL99nL+1/60RqNHjGgLxo1t60GQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFDX/8cjQs06JRxjohat64cQGES7vMB8GA1UdIwQYMBaAFFh1KCfiVxi7/V4F
+R9I4La/3kNzMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjc0NTI3
Zjc2NzI0MzYzMmIzZjBmMTFiMjQyYzNlZDYyMDk3MDQzNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTMyMzBmNjMtNDcwMC00OWExLThlY2ItYzJmYmZh
MmQ1ODUxL2RlZDFiZWMzOWVjY2RlZGU0MTZmNTNhY2M1ZGYwODExYTE3ZTJkNWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lMzIzMGY2My00NzAwLTQ5YTEtOGVjYi1jMmZi
ZmEyZDU4NTEvMjc0NTI3Zjc2NzI0MzYzMmIzZjBmMTFiMjQyYzNlZDYyMDk3MDQz
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEArs+XDANBAIAAjAHAwUAKANs4DANBgkqhkiG9w0BAQsFAAOC
AQEALFPaLTtsNNca/AAL4gUo78eVLCv72wKFifBajnU5Xg0DWKd2XVaJ7ZwMss43
a9Gd+qXoLMbtyLi78P+x01+gMF2+j+xvFffPSCc7kkLiV4y9uHGvfZL4KnGtI/7i
F0BBT9ggTZjy3EqgNsC5+j5cl8bO8t4KWDOoKd8hinu+it6C5jGq400x+WMyRf5I
qA2M9BP84CCiI0h9Uv4MSAh5pwcoGTx6QsY56aygq9zooJF0LaHc7piibbPp0dBe
9KQjlAB+rEprfaLC7l2DcwlUZvSqxON1I6tCzHiO/TfEYi1ez9aOenaOq2gYIwsx
KDNieRZmNtfoecT08jfK6TwiNQ==
-----END CERTIFICATE-----